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The Chief Executive 
All Stored Value Facility Licensees 


Dear Sir / Madam, 


Use of External Information and Data in Anti-Money Laundering and 
Counter-Financing of Terrorism (AML/CFT) Systems 


I am writing to draw your attention to key observations and good practices from 
a thematic review of how Authorized Institutions (AIs) integrate various external 
source information and data into their AML/CFT control systems to enhance 
effectiveness, which the HKMA has shared with the banking sector today’. The 
review was carried out as part of the HKMA’s response to emerging risks noted 
in the handling of increasing bank customer enquiries and complaints lodged 
with the HKMA in connection with COVID-19 related fraud as well as mule 
account networks and activities related to identity theft and investment scams. It 
also includes good practices observed in some Als’ adoption of regulatory 
technology (Regtech) in AML/CFT?”, such as network analytics. 


The thematic review examined AlIs’ end-to-end processes in handling and using 
information and data from various sources, including intelligence received from 
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the Fraud and Money Laundering Intelligence Taskforce (FMLIT)’, and how this 
contributed to their input into the wider AML/CFT ecosystem, such as suspicious 
transaction reports and interception of funds suspected to be related to fraud, as 
well as helping to mitigate risks both at the level of individual Als and the sector 
as a whole. 


A number of key observations and good practices are set out in the Annex, 
including how AML/CFT systems should support the integration of external 
information and data, the common characteristics of Als which are successful in 
enhancing AML/CFT systems through the use of such information and data as 
well as the need to consider performance measurement. Examples are provided 
of how Als, of differing sizes and complexity, use external information and data 
in tackling emerging risks such as those associated with COVID-19 related fraud 
through proactive data analysis and information sharing. 


As stored value facility (SVF) licensees also make use of information and data 
from various sources including typologies from FMLIT, the key observations 
and good practices from the thematic review are also relevant to the sector. SVF 
licensees are expected to adopt the most appropriate arrangements, 
commensurate with the size, business scope and risks of individual SVF 
licensees, to optimise the performance of their AML/CFT systems by making 
reference to the key observations and good practices shared from the thematic 
review. 


Should you have any questions regarding this circular, please contact us at 
aml @hkma.iclnet.hk. 


Yours faithfully, 


Carmen Chu 
Executive Director (Enforcement and AML) 


Encl. 


> FMLIT was established in 2017, led by the Hong Kong Police Force with participation by the Hong 
Kong Monetary Authority and a number of retail banks. Similar to arrangements in other 
international financial centres, FMLIT targets current and emerging financial crime threats by 
adopting a public private partnership approach to information sharing, both at the strategic and 
tactical level. 


